Hi.

On Sat, Mar 21, 2020 at 01:44:21AM +0100, rudu wrote:
> I searched the web with as many keywords as I could think of, to no avail ... 
> for me.

You should've searched for aa-logprof.


> What I figure out is the problem is that somehow, apparmor denies to 
> network-manager the ability to provide a valid resolv.conf file.
> So ipsec can't add a DNS server to my VPN connection.

For that particular file it's:

echo "/run/NetworkManager/resolv.conf rwk" \
        >> /etc/apparmor.d/local/usr.lib.ipsec.charon
aa-complain /usr/lib/ipsec/charon
aa-enforce /usr/lib/ipsec/charon

Reco

Reply via email to